In the Claims 

1 . (Currently amended) A visual display unit which displays a graphical user interface for 
representing and facilitating user manipulation of persistent yet revocable access control settings for a 
specific predetermined resource comprising: 

one or more display regions for graphical representations of all access control settings for the 
resource, wherein the graphical representations result from transformations appUed to the 
structured data which defines the access control settings for the resource; and 

one or more display regions for normal size, legibly scaled, unabridged representation of the 
content of the resource; 

wherein the set of display regions for representations of the access control settings and the 
display region for representation of the content of the resource are concurrently visible, are 
concurrently operable, and appear to the operator as in an integrated graphical user interface; 
and wherein the resource is a digital document. 

2. (Previously presented) The visual display unit of claim 1, wherein one or more fimctions modify 
the spatial layout of the display regions for representations of the access control settings. 

3. (Previously presented) The visual display unit of claim 1, wherein one or more fimctions modify 
the number of the display regions for representations of the access control settings. 

4. (Previously presented) The visual display unit of claim 1, wherein one or more functions modify 
the transformations that are applied to the structured data. 

5. (Previously presented) The visual display unit of claim 1, wherein a user is graphically represented 
by a display element comprising, at least in part, a likeness of the user. 

6. (Previously presented) The visual display unit of claim 5, wherein the likeness comprises, at least in 
part, a digital photograph, processed by a method including at least one step selected from the set of: 
adjusting image color saturation toward a predetermined target saturation level; converting to 
grayscale; adjusting image brightness toward a predetermined target brightness level; adjusting image 
contrast toward a predetermined target contrast level; adjvisting image sharpness toward a 
predetermined target sharpness level; and masking with a shape selected from a set comprising ovals 
and outlines of a bust. 
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7. (Previously presented) The visual display unit of claim 1, wherein the set of display regions further 
comprises: 

a display region for a graphical representation of the set of groups, users and roles defined by 
existing structured data for the resource and their respective access privileges; and 

a display region for a graphical representation of the result of transforming the set of groups, 
users and roles and their respective access privileges into a corresponding set of individual users 
and their respective effective access privileges. 

8. (Previously presented) The visual display unit of claim 1, further comprising a first display region 
for a graphical representation of at least one set of known users and groups, wherein the operator can 
designate indicia for known users and groups and visually associate the designated indicia with a 
second display region to change the structured data which defines the access control settings for the 
resource. 

9. (Previously presented) The visual display unit of claim 8, wherein the first display region is reduced 
in size until activated by the user, and the first display region is increased in size upon activation. 

10. (Currently amended) A visual display unit which displays a graphical user interface for 
representing access log information and access control settings for a single specific predetermined 
resource, wherein at least one display region contains a graphical representation of a set comprising one 
or more individual users, and wherein each of the individual users is graphically represented by a visual 
element which comprises: 

the identity of the individual user having read privilege for the resource; and 

a differing visual element for indicating if the user has write privilege for the resource; and one 

or more of the following visual elements: 

representation of the time of the most recent read access by the user to the resource; 
representation of the time of the most recent write access by the user to the resource; 

indication whether the most recent write access by the user to the resource is the most recent 

write access by any user to the resource; 

indication whether the most recent read access by the user to the resource has been before the 
most recent write access by any user to the resource; 
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indication whether the most recent read access by the user to the resource has been since the 
most recent write access by any user to the resource; and 

indication whether the user currently is without read privilege for the resource; and 
wherein the resource is a digital document. 

1 1 . (Previously presented) The visual display unit of claim 10, wherein the set of individual users 
consists of: the set of users who have any access privilege at all for the resource; and the set of users 
who have accessed the resource in the past although they currently are without any access privilege for 
the resource. 

12. (Previously presented) The visual display unit of claim 10, fiirther comprising a display region for 
a normal size, legibly scaled, unabridged representation of the content of the resource, wherein the 
display region for representation of the set of users and the display region for representation of the 
resource appear to the operator as an integrated graphical user interface. 

13. -27. (Canceled) 

28. (Previously presented) The visual display unit of claim 10, wherein graphical representations of 
users are sorted by one or more of the following attributes: 

the time of the most recent access by the user; 

the time of the most recent write access by the user; and 

current privileges the user has for the resource. 

29. (Previously presented) The visual display unit of claim 10, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

30. (Previously presented) The visual display unit of claim 12, wherein the set of individual users 
consists of: the set of users who have any access privilege at all for the resource; and the set of users 
who have accessed the resource in the past although they currently are without any access privilege for 

the resource. 

3 1 . (Previously presented) The visual display unit of claim 12, wherein graphical representations of 
users are sorted by one or more of the following attributes: 

the time of the most recent access by the user; 
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the time of the most recent write access by the user; and 
current privileges the user has for the resource. 

32. (Previously presented) The visual display unit of claim 12, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

33. (Previously presented) The visual display unit of claim 8, wherein the set further comprises access 
control settings macros and the operator can designate indicia for macros and visually associate the 
designated indicia with the second display region to change the structured data which defines the 
access control settings for the resource. 

35. (Canceled) 

34. (Previously presented) The visual display unit of claim 33, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

36. (Previously presented) The visual display unit of claim 7, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

37. (Previously presented) The visual display unit of claim 36, wherein the likeness comprises, at least 
in part, a digital photograph, processed by a method including at least one step selected fi-om the set of 
adjusting image color saturation toward a predetermined target saturation level; converting to 

grayscale; adjusting image brightness toward a predetermined target brightness level; adjusting image 
contrast toward a predetermined target contrast level; adjusting image sharpness toward a 
predetermined target sharpness level; and masking with a shape selected fi-om a set comprising ovals 
and outlines of a bust. 

38. (Previously presented) The visual display unit of claim 8, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

39. (Previously presented) The visual display unit of claim 38, wherein the likeness comprises, at least 
in part, a digital photograph, processed by a method including at least one step selected from the set of 

adjusting image color saturation toward a predetermined target saturation level; converting to 
grayscale; adjusting image brightness toward a predetermined target brightness level; adjusting image 
contrast toward a predetermined target contrast level; adjusting image sharpness toward a 



reply 



page 6 of 16 



10/802,658 



predetermined target sharpness level; and masking with a shape selected from a set comprising ovals 
and outlines of a bust. 

40. (Previously presented) The visual display unit of claim 30, wherein a user is graphically 
represented by a display element comprising, at least in part, a likeness of the user. 

41. (Previously presented) The visual display unit of claim 40, wherein the likeness comprises, at least 
in part, a digital photograph, processed by a method including at least one step selected from the set of 
adjusting image color saturation toward a predetermined target saturation level; converting to 
grayscale; adjusting image brightness toward a predetermined target brightness level; adjusting image 
contrast toward a predetermined target contrast level; adjusting image sharpness toward a 
predetermined target sharpness level; and masking with a shape selected from a set comprising ovals 
and outlines of a bust. 

42. (Previously presented) The visual display unit of claim 3 1 , wherein a user is graphically 

represented by a display element comprising, at least in part, a likeness of the user. 

43. (Previously presented) The visual display unit of claim 38, wherein the first display region is 
reduced in size until activated by the user, and the first display region is increased in size upon 
activation. 
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